Using external Okta as identity provider

You can use the Okta Org2Org integration to authenticate and optionally provision users from a source Okta org to a target org. The integration is installed and configured in the source org. You can use Okta Org2Org to connect multiple source orgs to a single Okta target org. This integration enables the source orgs to push users to the target org.

A common scenario where Org2Org is used is the hub-and-spoke model. In these scenarios, the spoke orgs are the source orgs and the hub org is the target org.

Source: https://help.okta.com/en-us/content/topics/provisioning/org2org/org2org-integrate.htm

Architecture

Process overview

• Customer adds Okta Org2Org application
• Chemaxon adds Customer's Idp
• Chemaxon adds IdP routing rule
• Customer finalizes Org2Org settings